MD5: 47F3CE Microsoft.vbs腳本KASPERSKY獨家已知，Webwasher啓發！

mhj144007

看看有沒有問題

AhnLab-V3 2007.6.16.0 06.15.2007 [td]no virus found AntiVir 7.4.0.32 06.15.2007 [td]no virus found Authentium 4.93.8 06.16.2007 [td]no virus found Avast 4.7.997.0 06.15.2007 [td]no virus found AVG 7.5.0.467 06.15.2007 [td]no virus found BitDefender 7.2 06.16.2007 [td]no virus found CAT-QuickHeal 9.00 06.15.2007 [td]no virus found ClamAV devel-20070416 06.16.2007 [td]no virus found DrWeb 4.33 06.15.2007 [td]no virus found eSafe 7.0.15.0 06.14.2007 [td]no virus found eTrust-Vet 30.7.3721 06.15.2007 [td]no virus found Ewido 4.0 06.15.2007 [td]no virus found FileAdvisor 1 06.16.2007 [td]no virus found Fortinet 2.85.0.0 06.16.2007 [td]no virus found F-Prot 4.3.2.48 06.15.2007 [td]no virus found F-Secure 6.70.13030.0 06.15.2007 Trojan.VBS.Runner.o Ikarus T3.1.1.8 06.15.2007 [td]no virus found Kaspersky 4.0.2.24 06.16.2007 Trojan.VBS.Runner.o McAfee 5054 06.15.2007 [td]no virus found Microsoft 1.2607 06.16.2007 [td]no virus found Norman 5.80.02 06.15.2007 [td]no virus found Panda 9.0.0.4 06.16.2007 [td]no virus found Prevx1 V2 06.16.2007 [td]no virus found Sophos 4.18.0 06.12.2007 [td]no virus found Sunbelt 2.2.907.0 06.16.2007 [td]no virus found Symantec 10 06.16.2007 [td]no virus found TheHacker 6.1.6.133 06.15.2007 [td]no virus found VBA32 3.12.0.2 06.15.2007 [td]no virus found VirusBuster 4.3.23:9 06.15.2007 [td]no virus found Webwasher-Gateway 6.0.1 06.16.2007 VBScript.Vulnerable.gen!High (suspicious) Aditional Information File size: 121 bytes MD5: 47f3ce7b017bb2833d1f60ed736ec45b SHA1: 006b68cd47d53fa5cca26c8f4ba380ea5e9b9f85 VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

> Go to: Home Contactar En Español www.virustotal.com :: ©Hispasec Sistemas 2004-07:: e-mail info@virustotal

wangjay1980

detected: Trojan program Trojan.VBS.Runner.o        URL: http://bbs.kafan.cn/attachment.php?aid=88051//Microsoft.vbs

mofunzone

汗。。

1. Set shell = createobject("Wscript.Shell")
   
2. Shell.run("C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft.com")
   
3. set Shell=Nothing

复制代码

这个没意义吧，只是改了右键而已，有的厂家乐意报有的未必。。

[ 本帖最后由 mofunzone 于 2007-6-15 20:18 编辑 ]

wangjay1980

不报也不用这样吧

红心王子

KV不报
上报

taihuxian

Virus: Trojan.VBS.Runner.o

Virus found while downloading Web content.

Address: bbs.kafan.cn

scottxzt

啥东西？

yangpizhi

Virus: Trojan.VBS.Runner.o
File: 88051
Directory: C:\Documents and Settings\Administrator\Application Data\IDM\DwnlData\Administrator\88051_109
Process: IDMan.exe
AVK。。。。。。。

啊弥陀佛

原帖由 scottxzt 于 2007-6-16 13:39 发表
啥东西？

Set shell = createobject("Wscript.Shell")
Shell.run("C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Microsoft.com")
set Shell=Nothing

把Microsoft.vbs拷贝到C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\下再运行看看，
应该就不会提示了

1688388728

病毒: Trojan.VBS.Runner.o
文件: Microsoft[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VM1NGYS8
进程: iexplore.exe